Security Software Engineer

What You'll Do:

• Work in a cloud-native environment using containerized workloads, serverless architecture, and automated CI/CD pipelines to manage Infrastructure-as-a-Service.
• Perform scripting and coding to develop security tools and automate repetitive tasks.
• Use Terraform to deploy security baseline controls, conduct code reviews, and provide recommendations for enhancing security.
• Develop and deploy custom security tools to detect, report, and remediate infrastructure vulnerabilities as part of risk mitigation strategies.
• Integrate log feeds from various sources into SIEM systems like Splunk and enable detection controls for critical security events.
• Participate in on-call support for security tickets and act as a Security System Site Reliability Engineer (SRE) on a rotational basis.
• Collaborate with engineering and operations teams to implement controls and processes that address identified security gaps.
• Identify and remediate security vulnerabilities and incidents.

What We Expect:

• Bachelor's degree or equivalent experience, with a minimum of 4 years in security engineering.
• Experience with cloud security, specifically for GCP or AWS.
• Proficiency in data formats such as JSON, YAML, and XML.
• At least 4 years of hands-on experience with programming and scripting languages like Java, Python, and Go, as well as tools like Terraform, GCP CLI, and API integrations.
• Familiarity with CI/CD platform tools such as Jenkins, GitHub Enterprise, Artifactory, and CircleCI, and experience automating security within CI/CD pipelines.

Key Deliverables:

• Develop and deploy custom security tools to detect, report, and address infrastructure vulnerabilities for risk mitigation.
• Integrate log feeds from various sources into SIEM systems, like Splunk, to enhance security monitoring and detection.
• Work with engineering and operations teams to implement effective security controls and processes.
• Proactively identify and respond to security vulnerabilities and incidents.